[Help-gnutls] Re: Connecting to news.mozilla.org:563?

Nikos Mavroyanopoulos nmav at gnutls.org
Sun Mar 23 18:19:31 CET 2003


On Sun, Mar 23, 2003 at 03:21:57PM +0100, Simon Josefsson wrote:

> > You have to disable TLS 1.0. Use --protocols ssl3
> It works, thanks.

Mozilla (the browser) uses a trick to be able to connect to
those servers as well. Firstly tries connecting with TLS1.0 and
SSL3.0 enabled, if that fails tries connecting with plain SSL 3.0.

This is obviously vulnerable to version downgrade attacks, but it
works with all of the broken servers out there.

-- 
Nikos Mavroyanopoulos





More information about the Gnutls-help mailing list